Wernhart Guestbook 2001.03.28 - Multiple SQL Injections

Wernhart Guestbook 2001.03.28 - Multiple SQL Injections source: https://www.securityfocus.com/bid/45084/info Wernhart Guestbook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues...

Wernhart Guestbook 2001.03.28 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/45084/info Wernhart Guestbook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

E-lokaler CMS 2 - Admin Login Multiple SQL Injections

E-lokaler CMS 2 - Admin Login Multiple SQL Injections source: https://www.securityfocus.com/bid/45098/info E-lokaler CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

SmartBox - page_id SQL Injection

SmartBox - pageid SQL Injection source: https://www.securityfocus.com/bid/45101/info SmartBox is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromi...

E-lokaler CMS 2 - Admin Login Multiple SQL Injections

source: https://www.securityfocus.com/bid/45098/info E-lokaler CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access...

Frog CMS 0.9.5 - Multiple Vulnerabilities

Frog CMS 0.9.5 - Multiple Vulnerabilities Vulnerability ID: HTB22685 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinfrogcms.html Product: Frog CMS Vendor: Philippe Archambault http://www.madebyfrog.com/ Vulnerable Version: 0.9.5 and probably prior versions Vendor Notification: 09 November...

Ecommerce.armoa.net Hacked By Tunisian Hacker : The~077

Ecommerce.armoa.net Hacked By Tunisian Hacker The077 Link : Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

CMS WebManager-Pro 7.4.3 - Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/44591/info CMS WebManager-Pro is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modi...

eoCMS Local File Include Vulnerability

eoCMS is prone to multiple input-validation vulnerabilities, including: 1. An HTML-injection vulnerability 2. An SQL-injection vulnerability 3. Multiple local file-include vulnerabilities Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise...

bloofoxCMS 'gender' Parameter SQL Injection Vulnerability

bloofoxCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

SQL injection in DBHcms

Vulnerability ID: HTB22651 Reference: http://www.htbridge.ch/advisory/sqlinjectionindbhcms.html Product: DBHcms Vendor: drbenhur.com http://www.drbenhur.com/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: SQL Injection Status: Not...

PhreeBooks <= 2.1 Multiple Vulnerabilities - Active Check

PhreeBooks is prone to multiple input validation vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ITS SCADA - Username SQL Injection

ITS SCADA - Username SQL Injection source: https://www.securityfocus.com/bid/43680/info ITS SCADA is prone to an SQL-injection vulnerability. Exploiting this issue can allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

LightNEasy 'LightNEasy.php' SQL Injection Vulnerability

LightNEasy is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlyi...

e107 0.7.23 - Multiple SQL Injections

e107 0.7.23 - Multiple SQL Injections source: https://www.securityfocus.com/bid/43327/info e107 is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

Group-Office 'modules/notes/json.php' SQL Injection Vulnerability

Group-Office is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

TCMS 100728 Cross Site Scripting / Local File Inclusion / SQL Injection

===================================== Vulnerability ID: HTB22571 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityintcms.html Product: TCMS Vendor: Target CMS http://targetcms.com/ Vulnerable Version: 100728 and Probably Prior Versions Vendor Notification: 09 August 2010...

TCMS - Multiple Input Validation Vulnerabilities

TCMS - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/42766/info TCMS is prone to multiple input-validation vulnerabilities, including a local file-include vulnerability, a local file-disclosure vulnerability, multiple SQL-injection vulnerabilities, and multip...

Rock Band CMS 0.10 - news.php Multiple SQL Injections (2)

Rock Band CMS 0.10 - news.php Multiple SQL Injections 2 source: https://www.securityfocus.com/bid/42424/info Rock Band CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

XSS vulnerability in Open Blog

Vulnerability ID: HTB22498 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinopenblog1.html Product: Open Blog Vendor: Tomaz Muraus http://www.open-blog.info/ Vulnerable Version: 1.2.1 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: Stored XSS Cross Si...